QUESTION 176Which feature does Acceptable Use Controls use to implement Cisco AVC?

A. ISAB. Cisco Web Usage ControlsC. Cisco WSAD. Cisco ESA

Answer: B

QUESTION 177You have configured a VLAN pair that is connected to a switch that is unable to pass traffic. If the IPS is configured correctly, which additional configuration must you perform to enable the switch to pass traffic?

A. Configure access ports on the switch.B. Configure the trunk port on the switch.C. Enable IP routing on the switch.D. Enable ARP inspection on the switch.

Answer: A

QUESTION 178You ran the ssh generate-key command on the Cisco IPS and now administrators are unable to connect. Which action can be taken to correct the problem?

A. Replace the old key with a new key on the client.B. Run the ssh host-key command.C. Add the administrator IP addresses to the trusted TLS host list on the IPS.D. Run the ssh authorized-keys command.

Answer: A

QUESTION 179Which piece of information is required to perform a policy trace for the Cisco WSA?

A. the URL to traceB. the source IP address of the traceC. authentication credentials to make the requestD. the destination IP address of the trace

QUESTION 182What are three arguments that can be used with the show content-scan command in Cisco IOS software? (Choose three)

A. sessionB. dataC. verboseD. bufferE. summaryF. statistics

Answer: AEF

QUESTION 183In addition to the CLI, what is another option to manage a Cisco IPS?

A. SDEEB. Cisco SDMC. Cisco IDMD. Cisco ISE

Answer: C

QUESTION 184What is the function of the Web Proxy Auto-Discovery protocol?

A. It enables a web client to discover the URL of a configuration file.B. It enables a web client to download a script or configuration file that is named by a URL.C. It enables a web client’s traffic flows to be redirected in real time.D. It enables web clients to dynamically resolve hostname records.

Answer: A

QUESTION 185What is a difference between a Cisco Content Security Management virtual appliance and a physical appliance?

A. The virtual appliance requires an additional license to run on a host.B. The physical appliance requires an additional license to activate its adapters.C. Migration between virtual appliances of varying sizes is possible, but physical appliances must be of equal size.D. The physical appliance is configured with a DHCP-enabled management port to receive an IP address automatically, but you must assign the virtual appliance an IP address manually in your management subnet.

Answer: A

QUESTION 186Which Cisco Web Security Appliance feature enables the appliance to block suspicious traffic on all of its ports and IP addresses?